From cb0d932e963b736ea1a7cab54eee7fbdfdb99f9d Mon Sep 17 00:00:00 2001 From: Mend Renovate Date: Sun, 8 Jan 2023 21:43:30 +0000 Subject: [PATCH] Update workflows (#957) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit [![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | minor | `v3.2.0` -> `v3.3.0` | | [actions/upload-artifact](https://togithub.com/actions/upload-artifact) | action | patch | `v3.1.1` -> `v3.1.2` | --- ### Release Notes
actions/checkout ### [`v3.3.0`](https://togithub.com/actions/checkout/releases/tag/v3.3.0) [Compare Source](https://togithub.com/actions/checkout/compare/v3.2.0...v3.3.0) ##### What's Changed - Implement branch list using callbacks from exec function by [@​cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1045](https://togithub.com/actions/checkout/pull/1045) - Add in explicit reference to private checkout options by [@​vanZeben](https://togithub.com/vanZeben) in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050) - Fix comment typos (that got added in [#​770](https://togithub.com/actions/checkout/issues/770)) by [@​lurch](https://togithub.com/lurch) in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057) ##### New Contributors - [@​vanZeben](https://togithub.com/vanZeben) made their first contribution in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050) - [@​lurch](https://togithub.com/lurch) made their first contribution in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057) **Full Changelog**: https://github.com/actions/checkout/compare/v3.2.0...v3.3.0
actions/upload-artifact ### [`v3.1.2`](https://togithub.com/actions/upload-artifact/releases/tag/v3.1.2) [Compare Source](https://togithub.com/actions/upload-artifact/compare/v3.1.1...v3.1.2) - Update all `@actions/*` NPM packages to their latest versions- [#​374](https://togithub.com/actions/upload-artifact/issues/374) - Update all dev dependencies to their most recent versions - [#​375](https://togithub.com/actions/upload-artifact/issues/375)
--- ### Configuration 📅 **Schedule**: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/google/osv.dev). --- .github/workflows/scorecards.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 21be5e02d90..6afa16090dc 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -22,7 +22,7 @@ jobs: id-token: write steps: - name: "Checkout code" - uses: actions/checkout@755da8c3cf115ac066823e79a1e1788f8940201b # v3.2.0 + uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0 with: persist-credentials: false @@ -42,7 +42,7 @@ jobs: # Upload the results as artifacts (optional). - name: "Upload artifact" - uses: actions/upload-artifact@83fd05a356d7e2593de66fc9913b3002723633cb # v3.1.1 + uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2 with: name: SARIF file path: results.sarif